Replace a value given by hand like one the mesh made (hq ADR 0228)

A given own secret the module reads at start is held by nobody but that
module, so the mesh need not read it to replace it: secret rotate now
works on it, and a value given through secret accept is replaced on its
own after the module's first good start under the mesh. Only a value an
outside party issues (own-secrets "issued-by": "outside") or one the
module applies stays as given, refused with the reason.

cmd/mesh-controller/push.go

@@ -109,7 +109,7 @@ func serve(ctx context.Context) error {
 	// `status` from a summary kept current here (novox/hq to-be 45 Phase 0): a machine saying
 	// something new is one thing that moves it, so the listener nudges it.
 	statusFrom = newStatusSummary(composeStatus(open))
-	server, err := connectLink(ctx, inv, work, nudgingListener{work, statusFrom})
+	server, err := connectLink(ctx, inv, work, nudgingListener{Enrolment: work, summary: statusFrom, open: open})
 	if err != nil {
 		return err
 	}
@@ -166,6 +166,8 @@ func serve(ctx context.Context) error {
 	}
 	// The hand-act log is counted for `status` on this connection rather than a new one a minute.
 	handActConn = bus.Conn
+	// And says when it replaced a value given by hand (novox/hq ADR 0228).
+	givenEvents = bus
 	// Composed now and kept current, before the verb that answers from it is served.
 	go statusFrom.keep(ctx)
 	// A call that outlasts its caller's patience is followed by `calls` (novox/hq issue 265).